CVE-2024-48847CWE-328

MD5 bypass operation

High · published December 5, 2024

CVSS v4.0
8.8
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes.

Affected products:

ABB ASPECT - Enterprise v3.08.01;

NEXUS Series v3.08.01;

MATRIX Series v3.08.01

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:L
EPSS
0.00258 · 16.5th percentile
Weakness
CWE-328 · Use of Weak Hash
Published
2024-12-05T12:44Z
EPSS history
Timeline
  • 05 DEC 12:44Z
    MD5 bypass operation
    cvelistv5